Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/ParetoSecurity/agent).

## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

 - [ ] build(python): update python dependencies (`pyyaml`, `ruamel.yaml`)
 - [ ] ci(actions): update github actions (`actions/checkout`, `actions/upload-artifact`, `github/codeql-action`, `go`, `namespacelabs/nscloud-checkout-action`, `python`, `ryand56/r2-upload-action`)
 - [ ] fix(deps): update module fyne.io/systray to v1.12.2
 - [ ] fix(deps): update module github.com/caarlos0/log to v0.6.2
 - [ ] fix(deps): update module github.com/elastic/go-sysinfo to v1.15.5
 - [ ] fix(deps): update module github.com/wailsapp/wails/v3 to v3.0.0-beta.17
 - [ ] build(npm): update npm dependencies (`@tailwindcss/vite`, `daisyui`, `elm-optimize-level-2`, `tailwindcss`, `tempy`)
 - [ ] fix(deps): update module github.com/carlmjohnson/requests to v0.26.1
 - [ ] fix(deps): update module github.com/stretchr/testify to v1.12.1
 - [ ] fix(deps): update module golang.org/x/sys to v0.48.0
 - [ ] build(go): update go dependencies to v2 (`github.com/charmbracelet/bubbletea`, `github.com/charmbracelet/lipgloss`, `github.com/pelletier/go-toml`)
 - [ ] build(npm): update dependency vite to v8
 - [ ] ci(actions): update github actions (major) (`actions/upload-artifact`, `azure/artifact-signing-action`, `cachix/cachix-action`, `github/codeql-action`, `namespacelabs/nscloud-checkout-action`)
 - [ ] 🔐 **Create all pending approval PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

 - [ ] [chore(deps): update module github.com/go-git/go-git/v5 to v5.19.2 [security]](../pull/623)

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

 - [ ] [build(npm): update dependency vite to v6.4.3 [security]](../pull/589)
 - [ ] [build(python): update dependency requests to v2.33.0 [security]](../pull/517)
 - [ ] [chore(deps): update module golang.org/x/image to v0.41.0 [security]](../pull/603)
 - [ ] [chore(deps): update module golang.org/x/net to v0.55.0 [security]](../pull/604)
 - [ ] [fix(deps): update module golang.org/x/crypto to v0.52.0 [security]](../pull/608)

## Detected Dependencies

<details><summary>github-actions (9)</summary>
<blockquote>

<details><summary>.github/actions/devenv/action.yml (3)</summary>

 - `namespacelabs/nscloud-cache-action v1`
 - `cachix/install-nix-action v31`
 - `cachix/cachix-action v16` → [Updates: `v17`]

</details>

<details><summary>.github/workflows/build.yml (16)</summary>

 - `actions/download-artifact v8`
 - `actions/upload-artifact v7`
 - `actions/upload-artifact v7`
 - `actions/upload-artifact v7`
 - `actions/download-artifact v8`
 - `actions/download-artifact v8`
 - `ryand56/r2-upload-action latest@b801a390acbdeb034c5e684ff5e1361c06639e7c` → [Updates: `latest`]
 - `actions/github-script v9`
 - `actions/github-script v9`
 - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
 - `actions/download-artifact v8`
 - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
 - `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
 - `goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94`
 - `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
 - `windows 2025`

</details>

<details><summary>.github/workflows/distro.yml (1)</summary>

 - `actions/checkout v7`

</details>

<details><summary>.github/workflows/gosec.yml (2)</summary>

 - `actions/checkout v7`
 - `securego/gosec master`

</details>

<details><summary>.github/workflows/integration.yml (1)</summary>

 - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]

</details>

<details><summary>.github/workflows/release.yml (11)</summary>

 - `actions/download-artifact v8`
 - `actions/download-artifact v8`
 - `azure/artifact-signing-action v1` → [Updates: `v2`]
 - `actions/download-artifact v8`
 - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
 - `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
 - `goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94`
 - `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
 - `crazy-max/ghaction-import-gpg v7.0.0@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd`
 - `ryand56/r2-upload-action latest@b801a390acbdeb034c5e684ff5e1361c06639e7c` → [Updates: `latest`]
 - `windows 2025`

</details>

<details><summary>.github/workflows/scorecard.yml (4)</summary>

 - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
 - `ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc`
 - `actions/upload-artifact v4@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` → [Updates: `v7`, `v4`]
 - `github/codeql-action v3.29.5@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81` → [Updates: `v3.37.9`, `v4.37.9`, `v3.29.5`]

</details>

<details><summary>.github/workflows/unit.yml (7)</summary>

 - `dependabot/fetch-metadata v3.1.0@25dd0e34f4fe68f24cc83900b1fe3fe149efef98`
 - `namespacelabs/nscloud-checkout-action v6@445c25d7009680597d73eb03c4e1cd5be522ed73` → [Updates: `v9`, `v6`]
 - `actions/upload-artifact v7`
 - `actions/setup-go v7`
 - `ncruces/go-coverage-report main`
 - `teamniteo/go-coverage-report v3`
 - `go 1.24` → [Updates: `1.27`]

</details>

<details><summary>.github/workflows/update-supported-distros.yml (5)</summary>

 - `actions/create-github-app-token v3`
 - `actions/checkout v7`
 - `actions/setup-python v7`
 - `peter-evans/create-pull-request v8`
 - `python 3.13` → [Updates: `3.14`]

</details>

</blockquote>
</details>

<details><summary>gomod (1)</summary>
<blockquote>

<details><summary>go.mod (29)</summary>

 - `go 1.25.0`
 - `github.com/charmbracelet/bubbletea v1.3.10` → [Updates: `v2.0.9`]
 - `github.com/charmbracelet/lipgloss v1.1.1-0.20250404203927-76690c660834@76690c660834` → [Updates: `v2.0.6`]
 - `github.com/davecgh/go-spew v1.1.1`
 - `github.com/fatih/color v1.19.0`
 - `github.com/fsnotify/fsnotify v1.10.1`
 - `github.com/fyne-io/image v0.1.1`
 - `github.com/godbus/dbus/v5 v5.2.2`
 - `github.com/kolide/toast v1.0.2`
 - `github.com/olekukonko/tablewriter v1.1.4`
 - `github.com/spf13/cobra v1.10.2`
 - `github.com/stretchr/testify v1.11.1` → [Updates: `v1.12.1`]
 - `github.com/wailsapp/wails/v3 v3.0.0-alpha.93` → [Updates: `v3.0.0-beta.17`]
 - `golang.org/x/crypto v0.51.0` → [Updates: `v0.52.0`]
 - `golang.org/x/sys v0.44.0` → [Updates: `v0.48.0`]
 - `github.com/go-git/go-git/v5 v5.19.1` → [Updates: `v5.19.2`]
 - `github.com/tc-hib/go-winres v0.3.3`
 - `golang.org/x/image v0.40.0` → [Updates: `v0.41.0`]
 - `golang.org/x/net v0.54.0` → [Updates: `v0.55.0`]
 - `fyne.io/systray v1.12.1` → [Updates: `v1.12.2`]
 - `github.com/caarlos0/log v0.6.0` → [Updates: `v0.6.2`]
 - `github.com/carlmjohnson/requests v0.25.1` → [Updates: `v0.26.1`]
 - `github.com/elastic/go-sysinfo v1.15.4` → [Updates: `v1.15.5`]
 - `github.com/google/uuid v1.6.0`
 - `github.com/h2non/gock v1.2.0`
 - `github.com/pelletier/go-toml v1.9.5` → [Updates: `v2.4.3`]
 - `github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c@5ac0b6a4141c`
 - `github.com/samber/lo v1.53.0`
 - `go.uber.org/ratelimit v0.3.1`

</details>

</blockquote>
</details>

<details><summary>npm (2)</summary>
<blockquote>

<details><summary>cmd/paretosecurity-installer/ui/package.json (9)</summary>

 - `@tailwindcss/vite ^4.1.3` → [Updates: `^4.1.3`]
 - `daisyui ^5.0.18` → [Updates: `^5.0.18`]
 - `elm 0.19.1-6`
 - `elm-optimize-level-2 0.3.5` → [Updates: `0.4.0`]
 - `tailwindcss ^4.1.3` → [Updates: `^4.1.3`]
 - `tempy 3.1.0` → [Updates: `3.2.0`]
 - `vite ^6.3.4` → [Updates: `^6.3.4`]
 - `vite-plugin-elm v3.1.0-2`
 - `yarn 1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e`

</details>

<details><summary>cmd/paretosecurity-tray/ui/package.json (9)</summary>

 - `@tailwindcss/vite ^4.1.3`
 - `daisyui ^5.0.18`
 - `elm 0.19.1-6`
 - `elm-optimize-level-2 0.3.5` → [Updates: `0.4.0`]
 - `tailwindcss ^4.1.3`
 - `tempy 3.1.0` → [Updates: `3.2.0`]
 - `vite ^6.3.4` → [Updates: `^8.0.0`]
 - `vite-plugin-elm v3.1.0-2`
 - `yarn 1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e`

</details>

</blockquote>
</details>

<details><summary>pip_requirements (1)</summary>
<blockquote>

<details><summary>.github/workflows/requirements.txt (3)</summary>

 - `requests ==2.32.4` → [Updates: `==2.33.0`]
 - `pyyaml ==6.0.2` → [Updates: `==6.0.3`]
 - `ruamel.yaml ==0.18.6` → [Updates: `==0.19.1`]

</details>

</blockquote>
</details>

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Navigation Menu

Uh oh!

Dependency Dashboard #13

Pending Approval

Open

PR Closed (Blocked)

Detected Dependencies

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Uh oh!

Dependency Dashboard #13

Description

Pending Approval

Open

PR Closed (Blocked)

Detected Dependencies

Activity

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions